PT-2019-10966 · Printerlogic · Printerlogic Print Management

Publicado 2019-05-08 · Atualizado 2019-05-10 · CVE-2018-5408

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: PrinterLogic Print Management software versions up to and including 18.3.1.96

Description: The issue concerns the validation of the PrinterLogic management portal's SSL certificate. When the certificate is invalid or malicious, it may allow an attacker to perform a man-in-the-middle (MITM) attack, potentially spoofing a trusted entity. This could result in the software connecting to a malicious host under the belief it is a trusted host, or accepting spoofed data that appears to come from a trusted host.

Recommendations: For versions up to and including 18.3.1.96, update to a version that correctly validates the SSL certificate to prevent potential man-in-the-middle attacks.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2018-5408

Produtos afetados

Printerlogic Print Management

Referências · 4

• https://kb.cert.org/vuls/id/169249 · Nota
• https://osv.dev/vulnerability/CVE-2018-5408 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5408 · Nota de Segurança
• http://securityfocus.com/bid/108285 · Nota